Bug 674653

Summary: Evolution mail client: Unable to load encryption cert from the smart card to send/receive encrypted messages.
Product: Red Hat Enterprise Linux 6 Reporter: Asha Akkiangady <aakkiang>
Component: evolution-data-serverAssignee: Matthew Barnes <mbarnes>
Status: CLOSED DUPLICATE QA Contact: Desktop QE <desktop-qa-list>
Severity: medium Docs Contact:
Priority: low    
Version: 6.0CC: ckannan, djasa, jmagne, mcrha, rpattath, rrelyea, tpelka
Target Milestone: rcKeywords: OtherQA, RHELNAK
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 624851 Environment:
Last Closed: 2013-08-02 04:30:40 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On:    
Bug Blocks: 624851    
Attachments:
Description Flags
proposed eds patch
none
updated eds patch for 2.32.3 none

Comment 2 Milan Crha 2011-02-03 07:15:09 UTC
Moving to evolution-data-server, where a possible fix would come.

Comment 3 Milan Crha 2011-02-03 09:02:30 UTC
Created attachment 476725 [details]
proposed eds patch

for evolution-data-server;

This may fix your issue, though I consider it sort-of corner case. On the other hand the change makes sense too, to prefer user's encryption key when set, thus maybe not as that much corner case.

I built a test package for you [1]. Please give it a try. Thanks in advance.

[1] https://brewweb.devel.redhat.com/taskinfo?taskID=3084696

Comment 4 Asha Akkiangady 2011-02-03 16:03:11 UTC
Tried to install test build for evolution-data-server, looks like on  RHEL 6.0 there is a NSS package dependency:

[root@dhcp231-96 Downloads]# rpm -ivh evolution-data-server-2.28.3-15.1.el6.x86_64.rpm
error: Failed dependencies:
    libnss3.so(NSS_3.12.9)(64bit) is needed by evolution-data-server-2.28.3-15.1.el6.x86_64

Comment 5 RHEL Program Management 2011-04-04 01:52:14 UTC
Since RHEL 6.1 External Beta has begun, and this bug remains
unresolved, it has been rejected as it is not proposed as
exception or blocker.

Red Hat invites you to ask your support representative to
propose this request, if appropriate and relevant, in the
next release of Red Hat Enterprise Linux.

Comment 6 Milan Crha 2013-05-09 12:49:46 UTC
Hmm, this got never upstreamed.

Asha, I'm sorry, I surly overlooked your reply, otherwise I might return back to you immediately, not more than two years later. Are you still able to test the patch, please?

Comment 10 Milan Crha 2013-06-24 13:12:04 UTC
Roshni, would you be able to test this one together with bug #624851, please? They depend on each other. The evolution bug is for UI part, to be able to select the certificate, while the eds part is to use it when encrypting.

Comment 11 Milan Crha 2013-07-17 10:37:53 UTC
Created attachment 774716 [details]
updated eds patch for 2.32.3

for evolution-data-server 2.32.3;

The patch required an update, due to rebase of the evolution packages. I created a new test package [1], evolution-data-server-2.32.3-8.2.el6, with this patch included. To get all the dependencies, including evolution 2.32.3-9, which includes a counter-part patch for bug #624851, feel free to use Matthew's test repository, whose .repo file with instructions can be found at [2]. In case of any missing dependency search brew [3] for the respective rhel6 package. Please note that it's not easy to downgrade to 2.28, due to internal data migration, but it would be good to have more testers of 2.32.3 for sure.

[1] https://brewweb.devel.redhat.com/taskinfo?taskID=6047317
[2] http://mbarnes.fedorapeople.org/evolution-232-testing.repo
[3] https://brewweb.devel.redhat.com/

Comment 12 David Jaša 2013-08-01 13:50:29 UTC
Evolution 2.32 works for me even without the latest patch _as long as the certificates issuer is known & trusted. IOW after I imported the CA that signed the smartcard certs, sending of signed & encrypted message works for me.

Comment 13 Milan Crha 2013-08-02 04:30:40 UTC
Thanks for the testing. There seemed to be a request for a change in eds too, in time of bug #624851, thus I asked Asha to file a bug for eds as well. If it's not needed after the rebase to 2.32.3, then even better.

For a future reference, please see David's notes on setting smart cards in 2.32.3 at bug #624851 comment #38.

*** This bug has been marked as a duplicate of bug 624851 ***